From owner-freebsd-hackers@FreeBSD.ORG  Fri Sep  9 20:28:50 2005
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
X-Original-To: hackers@freebsd.org
Delivered-To: freebsd-hackers@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E6C3C16A41F;
	Fri,  9 Sep 2005 20:28:50 +0000 (GMT)
	(envelope-from mhunter@malcolm.berkeley.edu)
Received: from malcolm.berkeley.edu (malcolm.Berkeley.EDU [128.32.206.239])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4B8E243D6A;
	Fri,  9 Sep 2005 20:28:50 +0000 (GMT)
	(envelope-from mhunter@malcolm.berkeley.edu)
Received: from malcolm.berkeley.edu (localhost [127.0.0.1])
	by malcolm.berkeley.edu (8.13.3/8.13.3) with ESMTP id j89KSnL1046369
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Fri, 9 Sep 2005 13:28:50 -0700 (PDT)
	(envelope-from mhunter@malcolm.berkeley.edu)
Received: (from mhunter@localhost)
	by malcolm.berkeley.edu (8.13.3/8.13.3/Submit) id j89KSn66046368;
	Fri, 9 Sep 2005 13:28:49 -0700 (PDT) (envelope-from mhunter)
Date: Fri, 9 Sep 2005 13:28:49 -0700
From: Mike Hunter <mhunter@ack.berkeley.edu>
To: Daniel Eischen <deischen@freebsd.org>
Message-ID: <20050909202849.GA46237@malcolm.berkeley.edu>
References: <4321DDCA.8050902@rfc2549.org>
	<Pine.GSO.4.43.0509091539050.8605-100000@sea.ntplx.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <Pine.GSO.4.43.0509091539050.8605-100000@sea.ntplx.net>
User-Agent: Mutt/1.5.6i
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-1.6
	(malcolm.berkeley.edu [127.0.0.1]);
	Fri, 09 Sep 2005 13:28:50 -0700 (PDT)
Cc: hackers@freebsd.org, "Ryan P. Sommers" <ryans@rpsommers.com>,
	Arne Schwabe <arne@rfc2549.org>,
	Andrea Campi <andrea+freebsd_hackers@webcom.it>
Subject: Re: "Smart" Hubs
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Sep 2005 20:28:51 -0000

On Sep 09, "Daniel Eischen" wrote:

> On Fri, 9 Sep 2005, Arne Schwabe wrote:
 
> > >I came in kinda late to this thread, but if you're trying to find
> > >a hub/switch in order to sniff network traffic, then you can always
> > >go for a switch that let's you monitor traffic on other ports.
> > >I know the Cisco's will let you do this, but I'd be suprised if
> > >you couldn't find it on some other cheaper switches.
> > >
> >
> > Or if you have 3 nics, use if_bridge. Or buy a really expensive managed
> > switch, which allows you to mirror ports, vlans etc.
> 
> Well, is $175.00 US expensive?  The Netgear FS726T can be had for
> about that price, and according to Netgear's web site, will support
> port monitoring.  A 24-port switch may not be small enough for you,
> but if you look around enough, you might find something that is.

I think it violates specifications, but how about a physical copper "tap",
like a two-headed cable?  Has anybody ever tried something like this?
Ethernet was designed in the days of shared media....

Mike